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AMENDMENTS TO THE CLAIMS : 

1. (Currently amended) A storage system comprising: 

a storage device for storing data files to be accessed by one or more users; and 

a storage management system for managing a data file in the storage device to b e 
acc e ssed by a user , the storage management system comprising: 

a management object for controlling management access in response to a request from a 
manager connected to the storage management system through a network, said management 
object authenticating a second manager ID and a second password received through the network 
from the manager, in accordance with a first ID and a first password stored beforehand to 
authenticate the manager; 

a storage configuration information file containing settings of the storage managem e nt 
system with respect to operation of the storage device ; and 

a temporary software interface object for accessing the settings in the storage 
configuration information file through the network, said temporary software interface object to 
be created by said management object when both authentication of the second manager ID and 
authentication of the second password by said management object succeed, and to be expired 
after a predetermined permission time, wherein: 

the authenticated manager's access to the settings contained in the storage configuration 
information file is permitted only while the temporary software interface object exists, 

said management object transmits a key, needed for communication through the network 
with the temporary software interface object, to the authenticated manager to enable 
management access to the storage configuration information file, and 
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said temporary software interface object permitting an access to the settings in the storage 
configuration information file is erased after lapse of said predetermined permission time so as to 
expire access by the authenticated manager. 

2. (Currently amended) A storage managem e nt system according to claim 1, 
wherein said temporary software interface object created by said management object is expired 
when a log-out sent from the authenticated manager at the end of the access is received. 

3. (Currently amended) A storage manag e m e nt system according to claim 1, 
wherein said key transmitted to the authenticated manager represents an address of the temporary 
software interface object. 

4. (Currently amended) A storage managem e nt system according to claim 3, 
wherein: 

the temporary software interface object created for the authenticated manager enables use 
of a subset of management functions available through the storage management system when 
accessing the storage configuration information file; and 

the subset of management functions is defined by a stored information file for the 
authenticated manager from among a plurality of individualized stored information files for a 
plurality of managers. 

5. (Currently amended) A storage manag e m e nt system according to claim 1, 
wherein said management object determines not to create a temporary software interface object 
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[[is]] if a non-use period from most recent log-out of the manager exceeds a predetermined 
period when the second manager ID and the second password are authenticated. 

6. (Currently amended) A storage manag e m e nt system according to claim 1, further 
comprising an information file for storing a plurality of functions of a remote method invocation 
protocol and a plurality of flags for defining which manager is permitted to use which function. 

7. (Currently amended) A storage managem e nt system according to claim 6, 
wherein said information file stores a flag for temporarily stopping the use of the created 
interfaces in response to a maintenance request. 

8. (Currently amended) A storage managem e nt system according to claim 1, further 
comprising a storage for storing a Java virtual machine having a Java applet program, wherein 
the Java applet program is transmitted to the manager in response to a request from the manager. 

9-16 (Cancelled) 

17. (Currently amended) A m e thod of controlling manag e ment acc e ss in respons e to 
a requ e st from a manag e r conn e ct e d through a network to a storage management system 
managing a data fil e in storag e to b e acc e ss e d by a user, th e method comprising: 

providing user access to data files stored in a storage device of a storage system, based at 
least in part on settings of the storage system contained in a storage configuration information 
file accessible via a storage management system; 
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authenticating a second manager ID and a second password received through th e n e twork 
by the storage management system from [[the]] a manager through a network , in accordance 
with a first ID and a first password stored beforehand, to authenticate the manager; 

creating for the authenticated manager a temporary software interface object at the 
storage management system needed for accessing [[a]] the storage system settings contained in 
the storage configuration information file containing s e ttings of th e storage manag e m e nt syst e m 
through the network, when both authentication of the second manager ID and authentication of 
the second password succeed, wherein the authenticated manager's access to the settings 
contained in the storage configuration information file is permitted by the storage management 
system only while the temporary software interface object exists; 

transmitting a key needed for communication through the network with the temporary 
software interface object to the authenticated manager to enable management access to the 
storage configuration information file; and 

erasing the temporary software interface object after a lapse of a predetermined 
permission time, so as to expire the authenticated manager's ability to access the settings in the 
storage configuration information file. 

18. (Previously presented) A method according to claim 17, further comprising 
expiring the temporary software interface object when a log-out sent from the authenticated 
manager at the end of the access is received. 

19. (Previously presented) A method according to claim 17, wherein the key 
transmitted to the authenticated manager represents an address of the temporary software 
interface object. 
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20. (Cancelled) 

21. (Previously presented) A method according to claim 17, wherein: 

the temporary software interface object created for the authenticated manager enables use 
of a subset of management functions available through the storage management system when 
accessing the storage configuration information file; and 

the subset of management functions is defined by a stored information file for the 
authenticated manager from among a plurality of individualized stored information files for a 
plurality of managers. 
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